8.0
High
CVE-2024-24914 Authenticated Gaia users can inject code or commands by global variables through special HTTP requests
Description
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management | Versions not published | |
| clusterxl | Versions not published | |
| multi-domain_management | Versions not published | |
| quantum_appliances | Versions not published | |
| quantum_maestro | Versions not published | |
| quantum_scalable_chassis | Versions not published | |
| quantum_security_gateway | Versions not published | |
| quantum_security_management | Versions not published |